GB/T 42187-2022Security and resilience - Organizational resilience - Principles and attributes (English PDF)

foreword

This document is in accordance with the provisions of GB/T 1.1-2020 "Guidelines for Standardization Work Part 1.Structure and Drafting Rules for Standardization Documents"

drafting.

Please note that some contents of this document may refer to patents. The issuing agency of this document assumes no responsibility for identifying patents.

This document is equivalent to ISO 22316.2017 "Principles and Attributes of Organizational Resilience for Safety and Resilience".

Introduction

Organizational resilience is the ability of an organization to withstand and adapt to changing environments in order to achieve its goals and to survive and thrive. toughness

A strong organization can predict and respond to threats and opportunities brought about by sudden or gradual changes in the internal and external environment. Strengthening resilience can serve as an organizational strategic objective

Standards are the result of good business practice and effective risk management.

Organizational resilience is influenced by specific interactions and combinations of factors at the strategic and executive levels. Organizational resilience is only relatively strong and

Weak, with no absolute measure or clear target.

Enhanced tissue resilience helps to.

--- Improve the ability to predict and deal with risks and vulnerabilities;

---Promote the coordination and integrity of management procedures, improve cohesion and performance;

--- Deepen the understanding of the stakeholders and their relevance that underpin the strategic objectives.

There is no single approach to enhancing tissue resilience. Relevant management procedures exist, but these procedures alone are not sufficient to ensure that the group

fabric toughness. Organizational resilience is the result of the interaction of attributes and activities, as well as contributions from other areas of technical expertise. These will not be

Determine how factors are addressed, how decisions are made and issued, and how they collaborate.

This document establishes the principles of organizational resilience and identifies attributes and activities that enhance organizational resilience.

This document includes.

--- Principles that lay the foundation for enhancing organizational resilience;

--- Describe the characteristic attributes of the organization adopting the above principles;

---Guide the activities to apply, evaluate and enhance the above attributes.

Security and Resilience Organizational Resilience Principles and Attributes

1 Scope

This document provides guidance on building resilience for organizations of all sizes and types and is not industry or sector specific.

This document applies to the entire life cycle of an organization. This document does not advocate for a one-size-fits-all approach to

Customize specific goals and programs according to the needs of the organization.

2 Normative references

The contents of the following documents constitute the essential provisions of this document through normative references in the text. Among them, dated references

For documents, only the version corresponding to the date is applicable to this document; for undated reference documents, the latest version (including all amendments) is applicable to

this document.

3 Terms and Definitions

The terms and definitions defined in ISO 22300 and the following apply to this document.

3.1

management management

Directs and controls the coordinated activities of an organization.

3.2

interested party

A person or organization that can influence a decision or activity, is influenced by it, or perceives itself to be influenced by it.

Note. It can be an individual or group that has an interest in any decision or activity of the organization.

3.3

Shared beliefs, values, attitudes and behaviors that contribute to an organization's unique social and psychological environment.

3.4

The ability of an organization to withstand and adapt to changes in its environment.

3.5

values

The beliefs held by the organization and the principles followed.

4 principles